COSC 325 – FINAL EXAM – QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS RATIONALES |
GUARANTEED PASS | LATEST EXAM UPDATE | EXAM PREP |
STUDY GUIDE | PRACTICE TEST
1. A software development team is implementing a new authentication system for a web
application. Which approach provides the strongest protection against unauthorized access
while maintaining usability?
A. Storing passwords in plain text for easier recovery
B. Implementing multi-factor authentication
C. Using only security questions for verification
D. Allowing unlimited login attempts
════════════════════
Correct Answer: B. Implementing multi-factor authentication
Rationale:
Multi-factor authentication enhances security by requiring users to provide two or more
verification factors before access is granted. Plain text password storage creates severe
security risks, security questions alone are insufficient, and unlimited login attempts increase
vulnerability to brute-force attacks.
════════════════════
2. A database administrator notices that query performance has significantly decreased after
a large volume of data was added. What is the BEST initial action to improve performance?
A. Delete random records from the database
B. Disable database backups
C. Analyze and optimize indexes
D. Restart all user accounts
════════════════════
Correct Answer: C. Analyze and optimize indexes
Rationale:
Indexes improve data retrieval speed by allowing the database engine to locate records
efficiently. Large data growth can fragment indexes or make existing indexes ineffective.
,Deleting records randomly may damage data integrity, disabling backups is unsafe, and
restarting user accounts does not address query optimization issues.
════════════════════
3. A company wants to minimize downtime during server maintenance. Which strategy BEST
supports high availability?
A. Performing updates during peak business hours
B. Using redundant servers and failover systems
C. Disconnecting all backup systems
D. Allowing only one administrator access
════════════════════
Correct Answer: B. Using redundant servers and failover systems
Rationale:
Redundant servers and failover mechanisms ensure continuous service availability if one
system fails or undergoes maintenance. Updating during peak hours disrupts users, removing
backups increases risk, and limiting access alone does not improve availability.
════════════════════
4. A project manager is evaluating software requirements gathered from stakeholders. Which
document formally defines the expected behavior and functionality of the system?
A. Risk assessment report
B. Network topology diagram
C. Software requirements specification
D. Disaster recovery checklist
════════════════════
Correct Answer: C. Software requirements specification
Rationale:
A Software Requirements Specification (SRS) documents system functionality, performance
expectations, and operational constraints. Risk reports and disaster recovery plans serve
different purposes, while topology diagrams focus on infrastructure design rather than
software functionality.
════════════════════
,5. A cybersecurity analyst discovers repeated failed login attempts from multiple IP addresses.
What type of attack is MOST likely occurring?
A. Phishing attack
B. SQL injection
C. Brute-force attack
D. Packet sniffing
════════════════════
Correct Answer: C. Brute-force attack
Rationale:
Brute-force attacks involve repeated login attempts using various username and password
combinations. Phishing targets users through deception, SQL injection exploits database
queries, and packet sniffing captures network traffic rather than directly attempting logins.
════════════════════
6. A software engineer wants to ensure that modifications to one module do not negatively
impact other parts of the application. Which testing method should be used?
A. Unit testing
B. Load testing
C. Regression testing
D. Acceptance testing
════════════════════
Correct Answer: C. Regression testing
Rationale:
Regression testing verifies that recent changes have not introduced new defects into
previously functioning areas of the system. Unit testing focuses on isolated components, load
testing evaluates performance under stress, and acceptance testing validates user
requirements.
════════════════════
7. Which network device is primarily responsible for forwarding data packets between
different networks?
A. Switch
B. Router
, C. Hub
D. Repeater
════════════════════
Correct Answer: B. Router
Rationale:
Routers direct traffic between separate networks using IP addressing and routing tables.
Switches connect devices within the same network, hubs broadcast traffic indiscriminately,
and repeaters only regenerate signals.
════════════════════
8. A development team adopts Agile methodology. Which practice is MOST closely associated
with Agile development?
A. Long release cycles with minimal feedback
B. Strictly sequential project phases
C. Continuous stakeholder collaboration
D. Eliminating customer involvement
════════════════════
Correct Answer: C. Continuous stakeholder collaboration
Rationale:
Agile emphasizes iterative development, frequent feedback, and ongoing collaboration with
stakeholders. Sequential phases describe Waterfall methodology, while reduced customer
involvement contradicts Agile principles.
════════════════════
9. An organization is implementing encryption for sensitive customer information stored in
databases. What is the PRIMARY purpose of encryption?
A. Improve hardware speed
B. Reduce storage requirements
C. Protect confidentiality of data
D. Eliminate the need for backups
════════════════════
Correct Answer: C. Protect confidentiality of data
VERIFIED AND WELL DETAILED ANSWERS | PLUS RATIONALES |
GUARANTEED PASS | LATEST EXAM UPDATE | EXAM PREP |
STUDY GUIDE | PRACTICE TEST
1. A software development team is implementing a new authentication system for a web
application. Which approach provides the strongest protection against unauthorized access
while maintaining usability?
A. Storing passwords in plain text for easier recovery
B. Implementing multi-factor authentication
C. Using only security questions for verification
D. Allowing unlimited login attempts
════════════════════
Correct Answer: B. Implementing multi-factor authentication
Rationale:
Multi-factor authentication enhances security by requiring users to provide two or more
verification factors before access is granted. Plain text password storage creates severe
security risks, security questions alone are insufficient, and unlimited login attempts increase
vulnerability to brute-force attacks.
════════════════════
2. A database administrator notices that query performance has significantly decreased after
a large volume of data was added. What is the BEST initial action to improve performance?
A. Delete random records from the database
B. Disable database backups
C. Analyze and optimize indexes
D. Restart all user accounts
════════════════════
Correct Answer: C. Analyze and optimize indexes
Rationale:
Indexes improve data retrieval speed by allowing the database engine to locate records
efficiently. Large data growth can fragment indexes or make existing indexes ineffective.
,Deleting records randomly may damage data integrity, disabling backups is unsafe, and
restarting user accounts does not address query optimization issues.
════════════════════
3. A company wants to minimize downtime during server maintenance. Which strategy BEST
supports high availability?
A. Performing updates during peak business hours
B. Using redundant servers and failover systems
C. Disconnecting all backup systems
D. Allowing only one administrator access
════════════════════
Correct Answer: B. Using redundant servers and failover systems
Rationale:
Redundant servers and failover mechanisms ensure continuous service availability if one
system fails or undergoes maintenance. Updating during peak hours disrupts users, removing
backups increases risk, and limiting access alone does not improve availability.
════════════════════
4. A project manager is evaluating software requirements gathered from stakeholders. Which
document formally defines the expected behavior and functionality of the system?
A. Risk assessment report
B. Network topology diagram
C. Software requirements specification
D. Disaster recovery checklist
════════════════════
Correct Answer: C. Software requirements specification
Rationale:
A Software Requirements Specification (SRS) documents system functionality, performance
expectations, and operational constraints. Risk reports and disaster recovery plans serve
different purposes, while topology diagrams focus on infrastructure design rather than
software functionality.
════════════════════
,5. A cybersecurity analyst discovers repeated failed login attempts from multiple IP addresses.
What type of attack is MOST likely occurring?
A. Phishing attack
B. SQL injection
C. Brute-force attack
D. Packet sniffing
════════════════════
Correct Answer: C. Brute-force attack
Rationale:
Brute-force attacks involve repeated login attempts using various username and password
combinations. Phishing targets users through deception, SQL injection exploits database
queries, and packet sniffing captures network traffic rather than directly attempting logins.
════════════════════
6. A software engineer wants to ensure that modifications to one module do not negatively
impact other parts of the application. Which testing method should be used?
A. Unit testing
B. Load testing
C. Regression testing
D. Acceptance testing
════════════════════
Correct Answer: C. Regression testing
Rationale:
Regression testing verifies that recent changes have not introduced new defects into
previously functioning areas of the system. Unit testing focuses on isolated components, load
testing evaluates performance under stress, and acceptance testing validates user
requirements.
════════════════════
7. Which network device is primarily responsible for forwarding data packets between
different networks?
A. Switch
B. Router
, C. Hub
D. Repeater
════════════════════
Correct Answer: B. Router
Rationale:
Routers direct traffic between separate networks using IP addressing and routing tables.
Switches connect devices within the same network, hubs broadcast traffic indiscriminately,
and repeaters only regenerate signals.
════════════════════
8. A development team adopts Agile methodology. Which practice is MOST closely associated
with Agile development?
A. Long release cycles with minimal feedback
B. Strictly sequential project phases
C. Continuous stakeholder collaboration
D. Eliminating customer involvement
════════════════════
Correct Answer: C. Continuous stakeholder collaboration
Rationale:
Agile emphasizes iterative development, frequent feedback, and ongoing collaboration with
stakeholders. Sequential phases describe Waterfall methodology, while reduced customer
involvement contradicts Agile principles.
════════════════════
9. An organization is implementing encryption for sensitive customer information stored in
databases. What is the PRIMARY purpose of encryption?
A. Improve hardware speed
B. Reduce storage requirements
C. Protect confidentiality of data
D. Eliminate the need for backups
════════════════════
Correct Answer: C. Protect confidentiality of data
